Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45732.roa
File:                     AS45732.roa (raw, json)
Hash identifier:          g00duqJWnnJicVFok9+hUyM2jkmmtmAu0yPaLFyZTOo=
Subject key identifier:   C9:97:77:95:A3:AC:61:9D:F6:8F:A7:51:78:1D:A2:41:9C:7A:96:52
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0764D785807DBECD31BEAD179FD2B40140E8422F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45732.roa
Signing time:             Mon 16 Feb 2026 11:00:00 +0000
ROA not before:           Mon 16 Feb 2026 10:55:00 +0000
ROA not after:            Mon 15 Feb 2027 11:00:00 +0000
asID:                     45732
IP address blocks:        103.165.248.0/24 maxlen: 24
                          103.196.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:64:d7:85:80:7d:be:cd:31:be:ad:17:9f:d2:b4:01:40:e8:42:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 16 10:55:00 2026 GMT
            Not After : Feb 15 11:00:00 2027 GMT
        Subject: CN=C9977795A3AC619DF68FA751781DA2419C7A9652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:a4:ab:bb:5a:cc:18:58:77:6d:86:12:64:
                    23:e9:2a:93:8c:c7:dc:ee:16:80:b4:4c:10:1e:a8:
                    db:53:2c:81:82:71:e0:90:b6:5d:45:bb:04:ca:f2:
                    a7:e6:b1:c9:20:1f:51:70:14:da:96:ea:ce:3f:77:
                    04:c1:11:47:9c:19:38:c1:24:42:23:18:09:42:7d:
                    35:f0:a4:d9:d5:c8:bd:d2:12:4b:97:e7:2f:08:7f:
                    ca:55:fe:c8:76:dd:85:d5:d3:cb:be:4b:94:b9:9f:
                    c5:39:5b:ed:82:4c:5f:eb:6f:74:1a:0b:1c:2e:75:
                    0d:88:de:0c:b4:f6:e1:b8:93:52:88:d0:4b:2a:f8:
                    48:18:be:f5:26:33:8f:ae:94:ce:31:24:22:a3:5d:
                    76:58:89:dc:61:a0:19:77:b9:20:97:7f:e2:69:c0:
                    52:c9:98:79:44:d2:00:7f:f2:c7:3d:fe:ce:e6:cf:
                    9f:f5:6a:8a:c4:eb:b0:40:97:fa:49:ec:85:ab:81:
                    a0:f4:60:bc:f9:70:96:4a:ed:c9:17:18:c4:e8:b0:
                    cd:9d:32:af:13:38:61:6e:5d:f0:92:5f:ae:91:b3:
                    37:f2:81:e9:9f:47:f4:56:c5:0f:09:e8:1c:08:73:
                    3c:31:27:31:43:e6:63:5e:6c:92:d7:de:0b:52:e2:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:97:77:95:A3:AC:61:9D:F6:8F:A7:51:78:1D:A2:41:9C:7A:96:52
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.248.0/24
                  103.196.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:9c:8e:20:a4:7c:b0:ff:0e:5e:cf:c5:c3:d0:5c:55:c2:04:
         e2:1b:a4:15:63:c2:3a:27:42:dc:1d:bb:f5:61:1c:ce:ff:e7:
         d0:70:73:ec:69:33:a0:a2:3c:56:c1:83:a4:1d:d2:06:da:49:
         8c:8a:17:c0:86:68:ae:30:b9:6d:10:93:85:b2:5b:40:33:d1:
         99:23:28:44:5d:6c:d4:86:81:4d:bc:98:ed:ce:01:fb:f5:00:
         92:71:5b:a1:f6:fc:57:e8:22:f2:59:29:ff:89:06:89:7f:78:
         58:af:7c:5d:d7:80:1f:84:91:c8:df:ef:f7:a6:3c:57:e7:4b:
         70:51:3f:d0:9e:7e:ed:bb:12:07:2e:62:14:ac:a5:8a:04:ec:
         25:3e:b6:76:1f:c8:67:00:ab:4f:fb:03:29:55:c8:36:19:69:
         b5:6f:80:7d:38:a2:90:13:bf:91:13:68:49:bd:18:40:4b:6f:
         67:2b:24:76:21:b5:b3:37:1a:c2:ab:ad:13:18:80:67:29:3f:
         ab:90:cc:3b:07:6c:e2:3b:db:7f:90:7e:ac:46:37:b9:e7:64:
         2e:c8:b8:43:22:0d:12:24:2c:43:58:cd:4d:29:27:31:23:9f:
         ed:1f:0b:d0:82:47:8a:2f:ce:3d:c0:c2:9f:7d:7d:d7:c6:e2:
         09:20:de:36
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUB2TXhYB9vs0xvq0Xn9K0AUDoQi8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNjEwNTUwMFoX
DTI3MDIxNTExMDAwMFowMzExMC8GA1UEAxMoQzk5Nzc3OTVBM0FDNjE5REY2OEZB
NzUxNzgxREEyNDE5QzdBOTY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZ2pKu7WswYWHdthhJkI+kqk4zH3O4WgLRMEB6o21MsgYJx4JC2XUW7BMry
p+axySAfUXAU2pbqzj93BMERR5wZOMEkQiMYCUJ9NfCk2dXIvdISS5fnLwh/ylX+
yHbdhdXTy75LlLmfxTlb7YJMX+tvdBoLHC51DYjeDLT24biTUojQSyr4SBi+9SYz
j66UzjEkIqNddliJ3GGgGXe5IJd/4mnAUsmYeUTSAH/yxz3+zubPn/VqisTrsECX
+knshauBoPRgvPlwlkrtyRcYxOiwzZ0yrxM4YW5d8JJfrpGzN/KB6Z9H9FbFDwno
HAhzPDEnMUPmY15sktfeC1LiNykCAwEAAaOCAdUwggHRMB0GA1UdDgQWBBTJl3eV
o6xhnfaPp1F4HaJBnHqWUjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1NzMyLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ6X4AwQBZ8SmMA0GCSqGSIb3DQEBCwUAA4IBAQBjnI4gpHyw/w5e
z8XD0FxVwgTiG6QVY8I6J0LcHbv1YRzO/+fQcHPsaTOgojxWwYOkHdIG2kmMihfA
hmiuMLltEJOFsltAM9GZIyhEXWzUhoFNvJjtzgH79QCScVuh9vxX6CLyWSn/iQaJ
f3hYr3xd14AfhJHI3+/3pjxX50twUT/Qnn7tuxIHLmIUrKWKBOwlPrZ2H8hnAKtP
+wMpVcg2GWm1b4B9OKKQE7+RE2hJvRhAS29nKyR2IbWzNxrCq60TGIBnKT+rkMw7
B2ziO9t/kH6sRje552QuyLhDIg0SJCxDWM1NKScxI5/tHwvQgkeKL849wMKffX3X
xuIJIN42
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:01 2026 by rpki-client